CVE-2016-4527

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7

Description The issue is related to the storage of authentication information in the database as ASCII hexadecimal values. This could allow a local attacker to gain access to user account information stored in the database files, specifically dBo.PropertyTables. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For ABB PCM600 versions prior to 2.7, update to version 2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the database files to minimize the risk of exploitation. Avoid using the affected database configuration until the issue is resolved.